$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft File: QQSkCCHEF2zELiVe9sFydHPD8Ao.mft (raw, json) Hash identifier: 7KfF5uG2j/UYEvLZaZtEzBEMBbtzKQKAlbPpAVc1fvI= Subject key identifier: 33:44:70:A3:B1:EB:2C:4F:8C:A7:2D:1E:3C:E1:35:3D:49:D1:FD:22 Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a Certificate serial: 019D3A1C8DACABB3204A58270B9CA8F5327D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft Manifest number: 18AA Signing time: Sun 29 Mar 2026 15:00:42 +0000 Manifest this update: Sun 29 Mar 2026 15:00:42 +0000 Manifest next update: Mon 30 Mar 2026 15:00:42 +0000 Files and hashes: 1: 1-fuWQ0J7N3Mc1-LpV47OkEYJ6Pg.roa (hash: d64kZTOMQS3ywmOiCwM9goS+Zs55OgLIp48OWiE2tqI=) 2: 3qCviuOG-ueF_1VEjm9A7m4dsIk.roa (hash: sAL6XW3hWoRAGWp0+zVbTSYYIBh9Tr5DdziSNbosFMc=) 3: 4iREikE0FlzD4Lki3jJx6aaj7Ek.roa (hash: R85Lc2X5cjTiidE1qCVwRr469wMVOizgeXCdlpP24Do=) 4: 7F404ndf6WlAawVxH8uEqbUfNqg.roa (hash: 0vRuwJ86hGL2rgS3c27BsrNGgAqpwI3nuvZOYvEC2o8=) 5: 891fnCNTe0IKQYnO-ZqvxNgk-7k.roa (hash: VPRQl1y1jooeZjbup+JMP7DkoiYT1QAj+vISvPCzQ5U=) 6: Amhr13WKOrupDvbNhR-H8uA8vnQ.roa (hash: DunPwzqrWTpngKU5F7a27cbOD9P4pJ+IEPvx/MUiLIg=) 7: CRbc03vb_t7S-8OrjziURXlLPLs.roa (hash: AwT4/FD/dxBwMmMETo+hpYLUml8m4wGXejb2vnR3jvE=) 8: DmNgBVzwALAZpD0xt4gW0SabWP4.roa (hash: +HcyssYq+nPIZImlmBkQlaLU/HQWdmQa3/3LFcnfluc=) 9: Dq47WCi1_R3R9nKkOKnsCn37r54.roa (hash: 5JD7iNqs4qn/sy+bgp/hKnEbHR2EBc8c01xHZGOpYMA=) 10: EiEKEI95auMCB7NfQVwo9byU814.roa (hash: qJa+m44cB1n22XnwN3TBLrmdvt3RH9NDFwUuAESZSTE=) 11: JKDe6ScGUf5knBKSEZ3INxcpX_k.roa (hash: cP1FQRZP0bYy6TqBtYSmhv38p8stWSoSv7D1CesDGKo=) 12: N-ugS43QXCOLtMQg4hBDzZHSfs4.roa (hash: H5adi4ikfxvo36OYV+mOyefgvVd4tLYXrjrnT87kOLI=) 13: O3ilaHX6VJtoUZBeu1-BglPYb-I.roa (hash: PoRHXYKRSqCrsj4FltoRS6V1gs+nJ0Qsq87ffUhtPkI=) 14: PAfqhrbdkl_yRiUylPK1xIqq4lg.roa (hash: MoYNDn1wuFUbbeUFbkvj5yCW8TfAg9g5sltO0zCqY1Y=) 15: QQSkCCHEF2zELiVe9sFydHPD8Ao.crl (hash: 9svdTQbtiOW0YnYjfhmbz2YBOzaFNUXb9j0WgJMb/j4=) 16: U7Tc0OMn99OVh4UaH8Gir63iiJs.roa (hash: VeiRvPbD+gYEQvLB86zuV+IwSFIqcHPYDQqYvNeKjps=) 17: Vr8UKQBR2K4aBwszRxtTMGpM3RU.roa (hash: pBwjHOXlk8Xh2v3/m1xk7uIqqtM9MysBJJTXP9nTkqk=) 18: aw7187ZOI0MpqazuRWsrcYgwwpQ.roa (hash: NIDCNaG3ouNUdnwxeJaCcGty477WEOLvnr2djhhc/90=) 19: bek0EGCQei4vOYeo1cw3OqhyNWo.roa (hash: m6rdcoyVs1N3a8H7buHnpBQjMeyGoW4VObVUZcGs+7M=) 20: cWtnPd8ZvgFa7GRaqMfs10BE4qc.roa (hash: jN/lGIzUOKHwZH6DyNIy+6o9b1TpGieuOJIXydb73lg=) 21: c_XVhcUysLwXAHApwazs-UkQkmQ.roa (hash: yDd1bLRr1tOEIQ6ft+0WAm2AEOFTsdq7bRYUYaVYKNA=) 22: hkSLq2UREFy1118xumuIZnvQ67Y.roa (hash: SOh35WJM4tvkJo/U2D6+8WiI7UsWl69I9bV1omMOiek=) 23: kqgMt21-DFLMw82FOeig-EaUgf0.roa (hash: IMAdg24Zv5aLWg8Ll0N/xPxQR4lu+BjbaXj/E4I85pM=) 24: n3D-Zk4G38G2tBgyUy3hXStCuWg.roa (hash: xWuIVNN480cZZue76BwJppWLzoJjQqcpD9fuq0+OWZ0=) 25: q1B4D6fhb1hsDMHl4DgqMg1LBS0.roa (hash: QyvrcsEDHcRC23C4LJneKzaSVc+UGnP9rW3V3L3o3QM=) 26: qtg18Q1n5Jfx1gK-KfQtl08To-k.roa (hash: oG53ITscWjNRdxBTzyirX6KiMhTU+HEToywwA4a+H6Q=) 27: rPUe_mYrLSmTmFv2LQZ8OTHJG9k.roa (hash: 5iRsBFsd3e5QtYFbDWJgyq4JRArcPXehU90Piw8H6Eo=) 28: sJ1sC2Tf4OlwBqYXFNFoZRduFG8.roa (hash: Lhps7HR/EcrDbFr4rG5Dh/G7U6wPLWZb+NnuBmiPIWs=) 29: sJZVmKX-G_XNNEcca8MTXPH-dbc.roa (hash: DQKLyMn35LbEuueIciMk2w6CESjK2ZNYZ5n5ZL//wOw=) 30: tWMyn7tpor7zLv8S77uSSoVBOzY.roa (hash: 9VLMYOGfLfqrY2pS0fnmG2KOSYmzAO47mTzvU9rKrJk=) 31: vgFc0Uh_MgrlizJZvhlwuychk-E.roa (hash: GdhoQmVw/bO3KTSgyH6uYKhysKhPclMR0dWBbW/oMfg=) 32: yfk1E30luISg0XzXUtlJ2MNM9eM.roa (hash: WxN+8AXOM93AE57ePd+WfH578Dm9CftwqJPfTKxDhLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 08:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:3a:1c:8d:ac:ab:b3:20:4a:58:27:0b:9c:a8:f5:32:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a Validity Not Before: Mar 29 15:00:42 2026 GMT Not After : Mar 30 15:00:42 2026 GMT Subject: CN=334470a3b1eb2c4f8ca72d1e3ce1353d49d1fd22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8e:cc:5e:57:96:b9:86:36:3f:cb:c3:58:92: f4:a3:02:37:f0:45:3f:dd:77:43:7f:37:05:34:9b: 77:63:7a:c7:26:c4:0f:81:11:ce:13:fa:60:3a:c6: 30:1b:7a:c1:8b:93:bf:aa:90:b0:a7:ea:99:c6:0f: a5:04:4e:8a:7f:bf:c2:cf:e3:c8:1e:93:94:05:71: 5f:0b:22:bc:51:c1:e0:95:aa:b7:1e:18:a4:51:a2: f6:4e:a4:82:04:9b:3f:f7:38:05:37:20:59:ef:e2: d5:f7:46:ab:74:8c:9e:52:50:3c:5f:e6:8b:63:23: 12:1c:f2:9e:3e:50:86:33:24:c1:71:a0:3d:6c:2a: 27:4a:db:66:bc:8d:4a:89:aa:42:3d:81:77:3b:04: 5c:ef:f2:a7:a0:27:4c:f4:bc:50:ce:e5:4c:8b:93: 0a:f4:4a:ff:a0:3c:04:b1:88:4d:9e:b4:da:86:84: 18:36:6b:db:0b:bd:f9:6b:3d:db:bf:c3:96:95:7f: 57:32:a1:37:66:fb:a4:39:30:e4:0f:2d:b4:2b:33: 4a:1a:17:14:89:1d:ad:74:7f:72:ca:9b:6e:bc:7d: 8f:f3:eb:6a:c5:ba:da:3f:f4:ee:88:18:7e:b6:84: 86:3c:ac:bb:ae:c8:85:ea:1d:ee:e4:51:47:85:90: 82:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:44:70:A3:B1:EB:2C:4F:8C:A7:2D:1E:3C:E1:35:3D:49:D1:FD:22 X509v3 Authority Key Identifier: keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:0e:1d:b5:47:db:1a:50:20:a8:4e:b6:01:ef:64:6b:d1:0b: 24:46:54:2f:0f:1f:08:ad:71:68:0c:9e:c5:03:82:d8:5c:1d: 81:a0:82:91:e7:18:33:3b:fd:59:8f:af:a9:67:74:ba:0e:b6: 7d:18:fa:b5:3d:5e:3e:a2:e3:b1:13:e0:dd:26:29:e4:4d:d6: 36:8d:1e:5a:53:26:81:b7:2e:ca:14:db:e2:d0:ba:cd:ed:4c: a9:57:47:9b:c2:f9:c0:2b:d5:c5:e5:92:44:35:bf:da:d9:c9: 60:01:ff:a6:04:02:fd:7f:dd:ac:d3:cd:0b:10:44:8c:f7:04: 9f:99:31:77:44:6e:71:62:21:c4:cd:8b:0d:4c:e9:20:09:11: e0:1a:a9:f0:49:2d:a0:55:b4:b2:a6:6f:47:fb:e0:06:2b:ad: 7b:2b:a5:d2:9b:67:98:6c:0e:7b:fb:a1:43:85:41:95:81:0e: e5:c8:5a:28:67:cc:42:41:14:7c:7f:a1:e3:e4:11:20:66:7e: e6:9f:3f:18:d0:2f:80:ff:08:9c:f9:f2:d2:02:b0:b2:02:36: 3b:98:ea:47:fc:0b:ec:6e:53:5e:48:3e:63:2c:21:a1:40:0a: 78:5c:6f:b9:98:2a:c6:dc:ee:18:bf:7b:58:b1:e7:56:66:de: 14:b8:94:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ06HI2sq7MgSlgnC5yo9TJ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj M2YwMGEwHhcNMjYwMzI5MTUwMDQyWhcNMjYwMzMwMTUwMDQyWjAzMTEwLwYDVQQD EygzMzQ0NzBhM2IxZWIyYzRmOGNhNzJkMWUzY2UxMzUzZDQ5ZDFmZDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo7MXleWuYY2P8vDWJL0owI38EU/ 3XdDfzcFNJt3Y3rHJsQPgRHOE/pgOsYwG3rBi5O/qpCwp+qZxg+lBE6Kf7/Cz+PI HpOUBXFfCyK8UcHglaq3HhikUaL2TqSCBJs/9zgFNyBZ7+LV90ardIyeUlA8X+aL YyMSHPKePlCGMyTBcaA9bConSttmvI1KiapCPYF3OwRc7/KnoCdM9LxQzuVMi5MK 9Er/oDwEsYhNnrTahoQYNmvbC735az3bv8OWlX9XMqE3ZvukOTDkDy20KzNKGhcU iR2tdH9yyptuvH2P8+tqxbraP/TuiBh+toSGPKy7rsiF6h3u5FFHhZCCuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNEcKOx6yxPjKctHjzhNT1J0f0iMB8GA1UdIwQY MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt YjI3ZDZlMjc4ZTE4LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4 LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQ4dtUfb GlAgqE62Ae9ka9ELJEZULw8fCK1xaAyexQOC2FwdgaCCkecYMzv9WY+vqWd0ug62 fRj6tT1ePqLjsRPg3SYp5E3WNo0eWlMmgbcuyhTb4tC6ze1MqVdHm8L5wCvVxeWS RDW/2tnJYAH/pgQC/X/drNPNCxBEjPcEn5kxd0RucWIhxM2LDUzpIAkR4Bqp8Ekt oFW0sqZvR/vgBiuteyul0ptnmGwOe/uhQ4VBlYEO5chaKGfMQkEUfH+h4+QRIGZ+ 5p8/GNAvgP8InPny0gKwsgI2O5jqR/wL7G5TXkg+YywhoUAKeFxvuZgqxtzuGL97 WLHnVmbeFLiU1g== -----END CERTIFICATE-----Generated at Sun Mar 29 18:36:02 2026 by rpki-client